Authenticator Login Project Authenticator Login — known CVE vulnerabilities

Every CVE whose affected-product data names Authenticator Login Project Authenticator Login, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-31681 — CVSS 9.8 (critical): Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from…
• CVE-2025-8995 — CVSS 9.8 (critical): Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This…
• CVE-2025-8093 — CVSS 8.8 (high): Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This…